| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
| |
the former is quicker and accurate enough for use here.
Submitted by: Jason Slagle <raistlin@toledolink.com> (on IRC)
Reviewed by: phk
|
|
|
|
|
|
|
| |
to the process when said signal is masked.
PR: 23457
Submitted by: Yasuhiko Watanabe <yasu@mrit.mei.co.jp>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
messages send by routers when they deny our traffic, this causes
a timeout when trying to connect to TCP ports/services on a remote
host, which is blocked by routers or firewalls.
rfc1122 (Requirements for Internet Hosts) section 3.2.2.1 actually
requi re that we treat such a message for a TCP session, that we
treat it like if we had recieved a RST.
quote begin.
A Destination Unreachable message that is received MUST be
reported to the transport layer. The transport layer SHOULD
use the information appropriately; for example, see Sections
4.1.3.3, 4.2.3.9, and 4.2.4 below. A transport protocol
that has its own mechanism for notifying the sender that a
port is unreachable (e.g., TCP, which sends RST segments)
MUST nevertheless accept an ICMP Port Unreachable for the
same purpose.
quote end.
I've written a small extension that implement this, it also create
a sysctl "net.inet.tcp.icmp_admin_prohib_like_rst" to control if
this new behaviour is activated.
When it's activated (set to 1) we'll treat a ICMP administratively
prohibited message (icmp type 3 code 9, 10 and 13) for a TCP
sessions, as if we recived a TCP RST, but only if the TCP session
is in SYN_SENT state.
The reason for only reacting when in SYN_SENT state, is that this
will solve the problem, and at the same time minimize the risk of
this being abused.
I suggest that we enable this new behaviour by default, but it
would be a change of current behaviour, so if people prefer to
leave it disabled by default, at least for now, this would be ok
for me, the attached diff actually have the sysctl set to 0 by
default.
PR: 23086
Submitted by: Jesper Skriver <jesper@skriver.dk>
|
|
|
|
|
|
|
|
|
| |
into confusion.
Add option -r to make ftpd support only read-only operations.
Submitted by: Flemming (F3) Jacobsen <fj@batmule.dk>
Reviewed by: phk
|
|
|
|
|
|
|
|
|
|
| |
In a few days I will commit a patch which changes vn(4) to use the
disk-minilayer. This will make vn(4) fully DEVFS friendly but have
the side effect that vnconfig needs the vn%d.ctl devices to be able
to configure vn(4).
Please remake your /dev/vn entries with this revision of MAKEDEV if
you don't rung DEVFS already.
|
|
|
|
| |
Reviewed by: freebsd-current
|
|
|
|
|
| |
Reviewed by: freebsd-current
Obtained from: NetBSD
|
|
|
|
|
| |
Reviewed by: freebsd-current (no objection)
Obtained from: KAME
|
|
|
|
|
|
|
| |
.ctl devices their own cdevsw since no I/O can or should be done on them.
Vn(4) is still not entirely DEVFS friendly since it only creates vn%d
nodes.
|
|
|
|
| |
question which I bollicked up in my previous commit.
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
| |
Rev. 1.17 was "Obtained from NetBSD", but is significantly different from the
equivalent NetBSD revision (rev. 1.30), which does not have this bug.
|
|
|
|
|
|
| |
cleanup effort.
Submitted by: Mark Peek <mark@whistle.com>
|
| |
|
| |
|
| |
|
|
|
|
| |
Temporarily disable PC98 until I bring it up to date.
|
| |
|
|
|
|
|
|
| |
failures and add some support for WEP on Prism II chip.
Submitted by: YAMAMOTO Shigeru <shigeru@iij.ad.jp>
|
|
|
|
| |
(tip 'o the tired cap to Bernd Walter <ticso@cicely5.cicely.de>)
|
|
|
|
|
|
|
| |
of a no-op all along anyway. There are other ways to set this
for release building, so nuke it.
PR: 22979
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
1. ICMP ECHO and TSTAMP replies are now rate limited.
2. RSTs generated due to packets sent to open and unopen ports
are now limited by seperate counters.
3. Each rate limiting queue now has its own description, as
follows:
Limiting icmp unreach response from 439 to 200 packets per second
Limiting closed port RST response from 283 to 200 packets per second
Limiting open port RST response from 18724 to 200 packets per second
Limiting icmp ping response from 211 to 200 packets per second
Limiting icmp tstamp response from 394 to 200 packets per second
Submitted by: Mike Silbersack <silby@silby.com>
|
|
|
|
|
|
|
|
|
|
| |
the kernel console. Instead, change logwakeup() to set a flag in the
softc. A callout then wakes up every so often and wakes up any processes
selecting on /dev/log (such as syslogd) if the flag is set. By default
this callout fires 5 times a second, but that can be adjusted by the
sysctl kern.log_wakeups_per_second.
Reviewed by: phk
|
|
|
|
|
|
|
| |
This fixes the possibility of a NULL pointer dereference in the case where
there are no mbufs or mbuf clusters left.
Approved by: phk
|
| |
|
|
|
|
| |
I can confirm it works on the alpha.
|
| |
|
|
|
|
|
|
|
|
|
| |
Add detach routine and turn driver into a module so it can be loaded
and unloaded. Also take a stab at implementing multicast packet
reception so that this NIC will work with IPv6. Promiscuous mode
doesn't seem to work, but I'm not sure why. It works well enough that
I can run dhclient on it and put it on the office network though.
Also ripped out spl stuff and replaced it with mutexes.
|
|
|
|
|
|
| |
functions in a kproc_* namespace.
Reviewed by: -arch
|
|
|
|
|
|
|
|
|
|
|
|
| |
Looking in src/Makfile* it looks like all the "WANT_AOUT" support
has been removed, maybe these should just go away...
Note that the a.out `ld' reaches over into src/contrib/gcc for libiberty
bits. This is biting us because the libiberty bits have evolved beyond
what the a.out `ld' can handle.
This change fixes the broken world, but only because very few have
"WANT_AOUT" defined.
|
|
|
|
| |
Glanced over by: marcel
|
|
|
|
|
|
|
|
|
|
| |
This is a driver for the LanMedia/SBE LMC150x E1/T1 family of cards.
The driver currently support unframed E1 (2048kbit/s) and framed
E1 (nx64).
These cards will provision E1/T1 lines for about 1/4 the cost of
a cisco router...
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
Try to use vn%d.ctl for setup and control if possible.
This paves the way for a DEVFS/cloning vn driver.
|
|
|
|
|
|
|
|
|
| |
Example:
.Fl flag .
The space is missing.
Obtained from: mdocNG
|
|
|
|
|
|
|
|
| |
a SIGINFO (normally via Ctrl-T), a line will be output indicating
the current phase number and progress information relevant to the
current phase.
Approved by: mckusick
|
|
|
|
|
|
|
|
| |
Catch and report lseek errors too
While reading header don't attempt to continue reading
if some IO operation fails
PR: 23549
|
|
|
|
| |
Submitted by: haro@tk.kubota.co.jp
|
| |
|